Implemented Active Directory structure

The following diagram shows the Active Directory hosting structure implemented by Microsoft Provisioning System within the Active Directory domain. To see more information about an item, click the plus (+) sign next to its name.

organizational unit icon Hosting organizational unit

Contains all of the Active Directory objects associated with Microsoft Provisioning System, as described below.

organizational unit icon _private container

Contains objects that allow Microsoft Provisioning System to do the following: expand Active Directory to greater than 5,000 objects, determine the role priority number (RPN) of the requesting user account, and determine the organization type (hosting, reseller, or customer) of an organizational unit.

user account icon User accounts

User accounts in the hosting container. For example, user1@hosting, user2@hosting, and so forth.

group icon Groups

Groups in the hosting organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by service provider administrators and customer service representatives (CSRs).

group icon admins@hosting group

The security group for service provider administrators. To make a user account a service provider administrator, you make it a member of this group.

group icon csradmins@hosting group

The security group for service provider CSRs. To make a user account a service provider CSR, you make it a member of this group.

organizational unit icon Reseller1 organizational unit

Contains all of the Active Directory objects associated with a reseller organization, in this example, Reseller1. All reseller organizational units are created directly under the hosting organizational unit, as shown in this example.

organizational unit icon _private container

Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the reseller organizational unit.

user account icon User accounts

User accounts in the reseller organization. For example, user1@reseller_organization, user2@reseller_organization, and so forth.

group icon Groups

Groups in the reseller organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.

group icon admins@reseller_organization group

The security group for reseller administrators. To make a user account a reseller administrator, you make it a member of this group.

group icon csradmins@reseller_organization group

The security group for reseller CSRs. To make a user account a reseller CSR, you make it a member of this group.

organizational unit icon Customer1 organizational unit

Contains all of the Active Directory objects associated with a customer organization, in this example, Customer1. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.

organizational unit icon _private container

Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.

  • group icon allcustomers@customer_organization group
  • group icon allusers@customer_organization group

user account icon User accounts

User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.

group icon Groups

Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.

group icon admins@customer_organization group

The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.

group icon csradmins@customer_organization group

The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.

organizational unit icon Customer2 organizational unit

Contains all of the Active Directory objects associated with a customer organization, in this example, Customer2. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.

organizational unit icon _private container

Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.

  • group icon allcustomers@customer_organization group
  • group icon allusers@customer_organization group

user account icon User accounts

User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.

group icon Groups

Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.

group icon admins@customer_organization group

The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.

group icon csradmins@reseller_organization group

The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.

organizational unit icon Reseller2 organizational unit

Contains all of the Active Directory objects associated with a reseller organization, in this example, Reseller2. All reseller organizational units are created directly under the hosting organizational unit, as shown in this example.

organizational unit icon _private container

Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the reseller organizational unit.

user account icon User accounts

User accounts in the reseller organization. For example, user1@reseller_organization, user2@reseller_organization, and so forth.

group icon Groups

Groups in the reseller organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.

group icon admins@reseller_organization group

The security group for reseller administrators. To make a user account a reseller administrator, you make it a member of this group.

group icon csradmins@reseller_organization group

The security group for reseller CSRs. To make a user account a reseller CSR, you make it a member of this group.

organizational unit icon Customer3 organizational unit

Contains all of the Active Directory objects associated with a customer organization, in this example, Customer3. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.

organizational unit icon _private container

Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.

  • group icon allcustomers@customer_organization group
  • group icon allusers@customer_organization group

user account icon User accounts

User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.

group icon Groups

Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.

group icon admins@customer_organization group

The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.

group icon csradmins@reseller_organization group

The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.

organizational unit icon Customer4 organizational unit

Contains all of the Active Directory objects associated with a customer organization, in this example, Customer4. All customer organizational units are created directly under a reseller organizational unit, as shown in this example.

organizational unit icon _private container

Contains objects that allow Microsoft Provisioning System to expand Active Directory to greater than 5,000 objects within the customer organizational unit.

  • group icon allcustomers@customer_organization group
  • group icon allusers@customer_organization group

user account icon User accounts

User accounts in the customer organization. For example, user1@customer_organization, user2@customer_organization, and so forth.

group icon Groups

Groups in the customer organization. The preconfigured administration groups are listed below. Groups can also include distribution groups created by administrators and CSRs.

group icon admins@customer_organization group

The security group for organization administrators. To make a user account an organization administrator, you make it a member of this group.

group icon csradmins@reseller_organization group

The security group for organization CSRs. To make a user account an organization CSR, you make it a member of this group.